Analyzing Cyber Kill Chain

Maps incident forensics to Lockheed Martin's 7-phase kill chain so you can see exactly where an attack succeeded, where it stalled, and what controls would've stopped it earlier. Most useful during post-mortems when you need to explain attack progression to non-technical stakeholders or identify detection gaps in your defenses. The workflow walks you through phase-by-phase mapping (recon through actions on objectives), cross-references MITRE ATT&CK techniques for granularity, and outputs actionable COAs per phase. One honest warning: the linear model breaks down with insider threats and sophisticated adversaries who skip or loop back through phases, so don't treat it as gospel for every scenario.

Install to Claude Code

npx -y skills add mukul975/anthropic-cybersecurity-skills --skill analyzing-cyber-kill-chain --agent claude-code